CVE-2024-41789

Siemens SENTRON 7KT PAC1260 Data Manager (all versions) is affected by an OS command injection vulnerability caused by inadequate sanitization of the language parameter in certain POST requests, enabling an authenticated attacker to execute arbitrary code with root privileges. Multiple sources (N...

CVE-2025-22011 ARM: dts: bcm2711: Fix xHCI power-domain

In the Linux kernel, the following vulnerability has been resolved: ARM: dts: bcm2711: Fix xHCI power-domain During s2idle tests on the Raspberry CM4 the VPU firmware always crashes on xHCI power-domain resume: root@raspberrypi:/sys/power echo freeze state 70.724347 xhcisuspend finished 70.727730...

CVE-2025-3431

creationtimestamp| type| source ---|---|--- 2025-04-08 07:46:13+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10856 2025-04-08 09:18:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmc5ecwfn22b 2025-04-08 11:29:00+00:00| seen| https://t.me/cvedetector/22416...

CVE-2025-31330 Code Injection Vulnerability in SAP Landscape Transformation (Analysis Platform)

SAP Landscape Transformation SLT allows an attacker with user privileges to exploit a vulnerability in the function module exposed via RFC. This flaw enables the injection of arbitrary ABAP code into the system, bypassing essential authorization checks. This vulnerability effectively functions as...

CVE-2025-30015 Memory Corruption vulnerability in SAP NetWeaver and ABAP Platform (Application Server ABAP)

Due to incorrect memory address handling in ABAP SQL of SAP NetWeaver and ABAP Platform Application Server ABAP, an authenticated attacker with high privileges could execute certain forms of SQL queries leading to manipulation of content in the output variable. This vulnerability has a low impact...

CVE-2025-3413 opplus springboot-admin SysGeneratorController.java code deserialization

A vulnerability has been found in opplus springboot-admin up to a2d5310f44fd46780a8686456cf2f9001ab8f024 and classified as critical. Affected by this vulnerability is the function code of the file SysGeneratorController.java. The manipulation of the argument Tables leads to deserialization. The...

CVE-2025-0361

During an annual penetration test conducted on behalf of Axis Communications, Truesec discovered a flaw in the VAPIX Device Configuration framework that allowed for unauthenticated username enumeration through the VAPIX Device Configuration SSH Management API...

CVE-2025-20948

Out-of-bounds read in enrollment with cdsp frame secfr trustlet prior to SMR Apr-2025 Release 1 allows local privileged attackers to read out-of-bounds memory...

CVE-2025-3393

CVE-2025-3393 affects mrcen springboot-ucan-admin (up to commit 5f35162032cbe9288a04e429ef35301545143509) and targets the Personal Settings Interface index. The vulnerability enables cross-site scripting through manipulation of an unknown part of that interface, with remote initiation. The descri...

CVE-2025-29482

Buffer Overflow vulnerability in libheif 1.19.7 allows a local attacker to execute arbitrary code via the SAO Sample Adaptive Offset processing of libde265...

CVE-2025-3360

A flaw was found in GLib. An integer overflow and buffer under-read occur when parsing a long invalid ISO 8601 timestamp with the gdatetimenewfromiso8601 function...

CVE-2025-21421

CVE-2025-21421 affects Qualcomm chipsets. The vulnerability is described as memory corruption that occurs while processing an escape code in an API, with the underlying root cause tied to how escape sequences are handled. The CVSSv3.1 metrics indicate a HIGH base score (7.8), with LOCAL attack ve...

CVE-2024-43065 Exposed Dangerous Method or Function in HLOS

Cryptographic issues while generating an asymmetric key pair for RKP use cases...

CVE-2024-43058 Incorrect Type Conversion or Cast in Multimedia Frameworks

Memory corruption while processing IOCTL calls...

CVE-2025-31175

creationtimestamp| type| source ---|---|--- 2025-04-07 05:48:55+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114295107356607964 2025-04-07 06:32:02+00:00| published-proof-of-concept| Telegram/EsnBsJ3Ssj-UYUC8Y7f1dDSxyldCCaK6EjJlv4mvyH2MMw 2025-04-07 07:17:49+00:00| seen|...

CVE-2024-58127

creationtimestamp| type| source ---|---|--- 2025-04-07 05:48:53+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114295107264034867 2025-04-07 08:42:06+00:00| seen| https://t.me/cvedetector/22264...

CVE-2024-58113

Vulnerability of improper resource management in the memory management module Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2024-58112

Exception capture failure vulnerability in the SVG parsing module of the ArkUI framework Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-27529

creationtimestamp| type| source ---|---|--- 2025-04-07 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-201/...

CVE-2025-3325

A vulnerability, which was classified as problematic, was found in iteaj iboot 物联网网关 1.1.3. This affects an unknown part of the file /core/admin/pwd of the component Admin Password Handler. The manipulation of the argument ID leads to improper access controls. It is possible to initiate the attac...